Proxmox Install SSL/TLS Certificates

[@TechTutorialsDavidMcKone]

If you want to learn more about Proxmox VE, this series will help you out kzbin.info/www/bejne/qXm6ioiqZbtgmZo

[@UnimatrixYoutube]

Thanks for the video. For anyone who does work with an (own) root/intermediate CA, it's very simple: on 11:08 where David pastes the server certificate in the lower _'Certificate Chain'_ field, you do the same but also paste your base64 intermediate certificate and root certificate including the _"BEGIN CERTIFICATE"_, _"END CERTIFICATE"_ lines in the same field below the server certificate. So the order would be: server certificate (top), intermediate certificate (middle), root certificate (bottom).

[@TechTutorialsDavidMcKone]

Thanks for sharing I've had to do that in my past and it was never obvious I think there were some systems that asked for the intermediate certificate, but the ones that didn't left you scratching your head

[@yeabuddy1610]

Thanks for adding this comment, it helped me resolve an issue with a uploading a certificate signed by a Windows intermediate CA. However, in my case, I didn't need to upload the root certificate, just the intermediate one, as uploading the root one caused errors for me.

[@UnimatrixYoutube]

@@yeabuddy1610 I coincidentally recently redid this for another, new Proxmox server (had to look up my own comment because I forgot howto 😄) but I also have a Windows Certificate authority so I wonder if you maybe didn't paste the root cert in the correct format. Either way, maybe the root one is not needed and I'm glad my comment helped 👍

[@sidneyking11]

I just switch over from XCP to Proxmox for my home lab. This is great timing for this subject. Thank you for making these kinds of videos. They are very helpful.

[@TechTutorialsDavidMcKone]

Thanks for the feedback And good to hear the video was helpful

[@fluffywarfield]

Been looking all over for something like this, amazing. Keep up the good work.

[@TechTutorialsDavidMcKone]

Thanks for the feedback, it's really appreciated Good to hear the video was helpful as well

[@smalltimer4370]

Perfect!

[@TechTutorialsDavidMcKone]

Thanks for the feedback and good to know the video was helpful

[@GreenOnionBrother]

It's not working for me. I just get the info "Certificate is not valid". Any idea what I might have done wrong?

[@TechTutorialsDavidMcKone]

Check the certificate information shown in the browser If it's showing the correct details, then your browser needs to trust the certificate authority Typically you have to import that CA's root certificate into its authorities list If that's been done then sometimes you have to close the browser and open it again for the certificate to be accepted And/or clear the web browser cache

[@GreenOnionBrother]

@@TechTutorialsDavidMcKone ok, I'll check it out as soon as I've got the time. Thank you for the quick reply!

[@Serpher1]

Can I just upload a certificate to a node as pve-ssl file and restart pveproxy and I'm good?

[@TechTutorialsDavidMcKone]

That is basically all I did But the certificate has to be signed by a CA the client will trust and it has to be valid

[@Serpher1]

@@TechTutorialsDavidMcKone Thanks!

[@MrGromac]

this is super!

[@TechTutorialsDavidMcKone]

Thanks for the feedback, I really appreciate it

[@maherkhalil007]

Great. Can you create video how to do ssl through ACME

[@TechTutorialsDavidMcKone]

I still need to find an internal option for this I don't think it's a good idea to use something like Let's Encrypt for internal servers

[@YADIRPULIDOLEON-bt4je]

hello David, thanks for the video, the SSL certificate you have purchased? or I can download one for free from somewhere

[@TechTutorialsDavidMcKone]

I didn't purchase the certificate as this was for an internal firewall I created it using OpenSSL but you'll find Certificate Authority services on a NAS, pfSense, etc You can check my other video on OpenSSL if you're interested in that kzbin.info/www/bejne/pIC2nWeaot6qm5o Let's Encrypt will provide Public certificates for free, but you'll usually have to buy them from other Public CAs

[@jocool7370]

How did you create the root-ca.conf file?

[@TechTutorialsDavidMcKone]

It's from a root CA using openSSL I have a video for that if you're interested kzbin.info/www/bejne/pIC2nWeaot6qm5o But now I'm leaning towards Step-CA as it basically automates the certificate process, a bit like Let's Encrypt, but it's an internal server kzbin.info/www/bejne/nJnUn51qf5yaprc

[@Buildingmachines]

Please guys I need your help I was told i have to pick an ISP look for flaws in the network and exploit it But I don't understand the statement.

[@kofibonsu8466]

Mate, what are you on about? we need more context or this is illegal.

[@TechTutorialsDavidMcKone]

I didn't want to ask for that very reason

[@stevensoucy6503]

I have to restart the node? or just the gui?

[@TechTutorialsDavidMcKone]

You need to restart the web service on all nodes It's not necessary to reboot it The web browser may also need a refresh